rwatson ae9ef07995 Move src/sys/sys/mac_policy.h, the kernel interface between the MAC ...

Framework and security modules, to src/sys/security/mac/mac_policy.h,
completing the removal of kernel-only MAC Framework include files from
src/sys/sys.  Update the MAC Framework and MAC policy modules.  Delete
the old mac_policy.h.

Third party policy modules will need similar updating.

Obtained from:	TrustedBSD Project

2006-12-22 23:34:47 +00:00

..

bus_if.m

- Revert making bus_generic_add_child() the default for BUS_ADD_CHILD().

2006-09-11 22:20:37 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

…

genassym.sh

…

imgact_aout.c

Correct two vm object reference leaks in error cases.

2006-03-16 08:51:59 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Add vm map and object locking to each_writable_segment().

2006-11-19 23:38:59 +00:00

imgact_gzip.c

Maintain the lock on the vnode for most of exec_elfN_imgact().

2005-12-24 04:57:50 +00:00

imgact_shell.c

Fix a panic which could occur parsing #!-lines in a shell-script. If the

2005-06-19 02:21:03 +00:00

inflate.c

Normalize a significant number of kernel malloc type names:

2005-10-31 15:41:29 +00:00

init_main.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

init_sysent.c

This commits the remake in kern/ make sysent to get

2006-11-03 18:57:49 +00:00

kern_acct.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_acl.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

kern_alq.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

kern_clock.c

Align the interfaces for the various watchdogs and make the interface

2006-12-15 21:44:49 +00:00

kern_condvar.c

Add second sleep queue so that sx and lockmgr can have separate sleep

2006-12-16 06:54:09 +00:00

kern_conf.c

Fix the race between devfs_fp_check and devfs_reclaim. Derefence the

2006-10-20 07:59:50 +00:00

kern_context.c

…

kern_cpu.c

- Print message about cpufreq and timecounter TSC

2006-03-03 02:06:04 +00:00

kern_descrip.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_environment.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_event.c

Save exit status of an exiting process in kn_data in the knote.

2006-11-20 22:17:50 +00:00

kern_exec.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_exit.c

Move sigqueue_take() call into proc_reparent(), this fixed bugs where

2006-10-25 06:18:04 +00:00

kern_fork.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_idle.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_intr.c

Add a function to return the MD interrupt source cookie associated with

2006-12-12 19:20:19 +00:00

kern_jail.c

Add a new priv(9) kernel interface for checking the availability of

2006-11-06 13:37:19 +00:00

kern_kse.c

Fix a potential point of confusion. Art Ironport we've seen this end up

2006-12-12 08:01:55 +00:00

kern_kthread.c

Don't do a PHOLD() in kthread_create() w/o a matching PRELE() in

2006-02-22 17:21:45 +00:00

kern_ktr.c

Remove slightly oddly placed suser() call from the KTR/ALQ setup sysctl:

2006-09-09 16:09:01 +00:00

kern_ktrace.c

ktrace_cv is no longer used - remove

2006-12-17 00:16:09 +00:00

kern_linker.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_lock.c

track lock class name in a way that doesn't break WITNESS

2006-11-13 05:41:46 +00:00

kern_lockf.c

…

kern_mac.c

Move src/sys/sys/mac_policy.h, the kernel interface between the MAC

2006-12-22 23:34:47 +00:00

kern_malloc.c

Increase usefulness of "show malloc" by moving from displaying the basic

2006-10-26 10:17:13 +00:00

kern_mbuf.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

kern_mib.c

mp_ncpus is always (properly) initialized, even on UP kernels, so just use it.

2005-08-21 18:03:31 +00:00

kern_module.c

Address a problem I missed in removing Giant from the kernel linker. Not

2006-06-26 18:34:45 +00:00

kern_mtxpool.c

…

kern_mutex.c

- Fix some gcc warnings in lock_profile.h

2006-12-16 02:37:58 +00:00

kern_ntptime.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_physio.c

…

kern_pmc.c

Fix -Wundef.

2005-12-04 02:12:43 +00:00

kern_poll.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_priv.c

Add a new priv(9) kernel interface for checking the availability of

2006-11-06 13:37:19 +00:00

kern_proc.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_prot.c

Add a new priv(9) kernel interface for checking the availability of

2006-11-06 13:37:19 +00:00

kern_resource.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_rwlock.c

track lock class name in a way that doesn't break WITNESS

2006-11-13 05:41:46 +00:00

kern_sema.c

…

kern_shutdown.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_sig.c

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

kern_subr.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_switch.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_sx.c

track lock class name in a way that doesn't break WITNESS

2006-11-13 05:41:46 +00:00

kern_synch.c

Add second sleep queue so that sx and lockmgr can have separate sleep

2006-12-16 06:54:09 +00:00

kern_syscalls.c

Make system call modules a bit more robust:

2006-08-01 16:32:20 +00:00

kern_sysctl.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_tc.c

Commit the results of the typo hunt by Darren Pilgrim.

2006-08-04 07:56:35 +00:00

kern_thr.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_thread.c

Remove unused sysctls.

2006-12-19 13:06:01 +00:00

kern_time.c

- Remove third parameter of itimer_find, the parameter is always zero.

2006-11-28 03:24:34 +00:00

kern_timeout.c

Improve ktr(4) logging for callout(9) subsystem. Log all inserts and

2006-10-11 14:57:03 +00:00

kern_umtx.c

Add a lwpid field into per-cpu structure, the lwpid represents current

2006-12-20 04:40:39 +00:00

kern_uuid.c

Separate functions with a newline.

2006-07-17 21:00:42 +00:00

kern_xxx.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

ksched.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

link_elf_obj.c

Linker set support depends on the magic __start_<section> and

2006-11-30 10:50:29 +00:00

link_elf.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

linker_if.m

…

Make.tags.inc

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

Makefile

Add support for the generated file systrace_args.c.

2006-08-05 19:25:14 +00:00

makesyscalls.sh

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

md4c.c

…

md5c.c

Fix a panic on sparc64 related to inproper aligment - we cannot assume,

2006-03-30 18:45:50 +00:00

p1003_1b.c

Update #includes list.

2006-11-11 16:19:12 +00:00

posix4_mib.c

Fix mispatch of includes list; allows my kernel to build successfully.

2006-11-12 03:34:03 +00:00

sched_4bsd.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

sched_core.c

Add user priority loaning code to support priority propagation for

2006-08-25 06:12:53 +00:00

sched_ule.c

Changes to try fix sched_ule.c courtesy of David Xu.

2006-12-06 06:55:59 +00:00

serdev_if.m

MFp4: Add the ipend() method to the serdev I/F to allow umbrella

2006-04-23 22:12:39 +00:00

subr_acl_posix1e.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

subr_autoconf.c

Add a mutex to protect the list of interrupt config hooks. We do assume

2006-07-19 18:53:56 +00:00

subr_blist.c

…

subr_bus.c

Add a default method for BUS_ADD_CHILD() that just calls

2006-09-11 19:41:31 +00:00

subr_clist.c

…

subr_clock.c

Use utc_offset() where applicable, and hide the internals of it

2006-10-02 18:23:37 +00:00

subr_devstat.c

…

subr_disk.c

Add a new I/O request - BIO_FLUSH, which basically tells providers below to

2006-10-31 21:11:21 +00:00

subr_eventhandler.c

…

subr_fattime.c

Better naming of fattime conversion functions, they do convert to timespec

2006-10-24 10:27:23 +00:00

subr_firmware.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

subr_hints.c

Use a sleep mutex instead of an sx lock for the kernel environment. This

2006-07-09 21:42:58 +00:00

subr_kdb.c

Add a funny sysctl: debug.kdb.trap_code .

2006-06-18 12:27:59 +00:00

subr_kobj.c

Increment kobj_lookup_misses on a miss rather than decrementing it.

2005-12-29 18:00:42 +00:00

subr_lock.c

Bug fix for obscenely large wait times on uncontested locks

2006-12-04 22:15:50 +00:00

subr_log.c

…

subr_mbpool.c

…

subr_mchain.c

Change API of mb_copy_t in libmchain so that netsmb can handle

2005-07-29 13:22:37 +00:00

subr_module.c

…

subr_msgbuf.c

…

subr_param.c

Partially revert revision 1.66, which contained a change that did not

2005-10-14 19:15:10 +00:00

subr_pcpu.c

Fix 'show allpcpu' ddb command on non-x86. CPU IDs are in the range 0 ..

2005-11-03 21:06:29 +00:00

subr_power.c

General consensus is that it would be even better to run this in a

2005-11-09 16:22:56 +00:00

subr_prf.c

Flushing the buffer is conditional on actually using the buffer. Oops.

2006-11-30 07:25:52 +00:00

subr_prof.c

Change the addupc_*() functions to use the uintfptr_t type for pc rather

2005-12-16 22:08:32 +00:00

subr_rman.c

Fix an edge case in rman_manage_region() where it didn't handle a resource

2006-12-04 16:45:23 +00:00

subr_rtc.c

Use utc_offset() where applicable, and hide the internals of it

2006-10-02 18:23:37 +00:00

subr_sbuf.c

Make sbuf_copyin() return the number of bytes copied on success.

2005-12-23 11:49:53 +00:00

subr_scanf.c

…

subr_sleepqueue.c

Cleaner fix for handling declaration of loop variable under INVARIANTS

2006-12-17 00:14:20 +00:00

subr_smp.c

Rename the KDB_STOP_NMI kernel option to STOP_NMI and make it apply to all

2005-10-24 21:04:19 +00:00

subr_stack.c

Correct typos

2006-05-28 22:15:28 +00:00

subr_taskqueue.c

When starting up threads in taskqueue_start_threads create them

2006-05-24 22:11:07 +00:00

subr_trap.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

subr_turnstile.c

Add a new 'show sleepchain' ddb command similar to 'show lockchain' except

2006-08-15 18:29:01 +00:00

subr_unit.c

…

subr_witness.c

MUTEX_PROFILING has been generalized to LOCK_PROFILING. We now profile

2006-11-11 03:18:07 +00:00

sys_generic.c

Prevent IOC_IN with zero size argument (this is only supported

2006-10-14 19:01:55 +00:00

sys_pipe.c

Use pipe_direct_write() optimization only if the data is in process' memory.

2006-12-19 12:52:22 +00:00

sys_process.c

Make KSE a kernel option, turned on by default in all GENERIC

2006-10-26 21:42:22 +00:00

sys_socket.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

syscalls.c

This commits the remake in kern/ make sysent to get

2006-11-03 18:57:49 +00:00

syscalls.master

Ok, here it is, we finally add SCTP to current. Note that this

2006-11-03 15:23:16 +00:00

systrace_args.c

Ok, here it is, we finally add SCTP to current. Note that this

2006-11-03 15:23:16 +00:00

sysv_ipc.c

For now, back out sysv_ipc.c:1.30, which caused shmget() with odd mode

2006-12-16 11:30:54 +00:00

sysv_msg.c

MFP4: (part of) 110058

2006-12-20 19:26:30 +00:00

sysv_sem.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

sysv_shm.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

tty_compat.c

Move the old BSD4.3 tty compatibility from (!BURN_BRIDGES && COMPAT_43)

2006-01-10 09:19:10 +00:00

tty_conf.c

…

tty_cons.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

tty_pts.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

tty_pty.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

tty_subr.c

…

tty_tty.c

Use ctty instead of just returning. ctty just has a simple open that

2006-09-27 16:41:15 +00:00

tty.c

Back out rev. 1.266. The real cause for the recent panics has been fixed

2006-12-20 02:49:59 +00:00

uipc_accf.c

…

uipc_cow.c

Previously, nothing prevented the page that was returned by pmap_extract()

2005-10-23 07:41:56 +00:00

uipc_domain.c

soreceive_generic(), and sopoll_generic(). Add new functions sosend(),

2006-07-24 15:20:08 +00:00

uipc_mbuf2.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

uipc_mbuf.c

The prepend function did not handle non-pkthdr's correctly.

2006-12-21 19:58:04 +00:00

uipc_mqueue.c

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

uipc_sem.c

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

uipc_sockbuf.c

Use sysctl_handle_long() instead of duplicating it's logic for

2006-09-06 21:59:36 +00:00

uipc_socket2.c

Change two XXX's to two notes: the fact that SOCK_LOCK(so) ==

2006-08-02 16:23:52 +00:00

uipc_socket.c

Fix a race in soclose() where connections could be queued to the

2006-11-22 23:54:29 +00:00

uipc_syscalls.c

In kern_sendfile() fix the calculation of sbytes (the total number of bytes

2006-11-12 20:57:00 +00:00

uipc_usrreq.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

vfs_acl.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

vfs_aio.c

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

vfs_bio.c

In rev. 1.514, iodone on async buffer may happen before code checks the

2006-12-20 09:22:31 +00:00

vfs_cache.c

Axe Giant from vn_fullpath(9). The vnode -> pathname lookup should be

2006-06-16 05:09:28 +00:00

vfs_cluster.c

Replace PG_BUSY with VPO_BUSY. In other words, changes to the page's

2006-10-22 04:28:14 +00:00

vfs_default.c

change vop_lock handling to allowing tracking of callers' file and line for

2006-11-13 05:51:22 +00:00

vfs_export.c

In vfs_export(), if we specify MNT_DELEXPORT in the struct export_args,

2006-12-16 15:50:36 +00:00

vfs_extattr.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

vfs_hash.c

In vfs_hash_get(): mount point should never be changed

2006-04-18 08:05:08 +00:00

vfs_init.c

Remove duplicate security checks already performed in kern_kldload().

2006-06-26 18:33:32 +00:00

vfs_lookup.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

vfs_mount.c

Add a function vfs_deleteopt() which searches through the vfsoptlist

2006-12-16 15:44:03 +00:00

vfs_subr.c

change vop_lock handling to allowing tracking of callers' file and line for

2006-11-13 05:51:22 +00:00

vfs_syscalls.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

vfs_vnops.c

change vop_lock handling to allowing tracking of callers' file and line for

2006-11-13 05:51:22 +00:00

vnode_if.src

change vop_lock handling to allowing tracking of callers' file and line for

2006-11-13 05:51:22 +00:00